1. Data controller
The controller of your personal data is WAVE BOAT, obrt za ugostiteljstvo i rekreaciju, vl. Saša Pavlović, Pula, Ulica Videlanka 26, 52100 Pula, Croatia, registration number 97440426, VAT number 11709648533. You can contact us by email at boat.medulin@gmail.com, by phone at +385 91 621 1109 or +385 91 955 3199, or by WhatsApp at +385 91 621 1109.
2. Scope
This Privacy Policy explains how we collect, use, disclose, and protect personal data when you visit our website, contact us, request a reservation, or participate in a Medulin Boat Tour service.
3. Personal data we may collect
Depending on how you interact with us, we may collect your name, phone number, WhatsApp number, email address, booking details, preferred dates, guest count, special requests, communication history, and any information you voluntarily provide when asking about or reserving a trip. We may also collect limited technical data such as device information, browser type, and basic usage logs.
4. How we collect data
We mainly collect data directly from you when you contact us via WhatsApp, phone, or email. We may also receive data through Google Maps when you interact with the map embed, and through standard website logs or hosting diagnostics used to keep the site secure and functional.
5. Why we use your data
We use personal data to respond to inquiries, arrange and confirm reservations, provide the boat tour service, communicate practical trip details, process payments on board, maintain the website, improve our services, and comply with legal, accounting, or safety obligations.
6. Legal bases for processing
We process personal data when it is necessary to take steps at your request before a contract is formed, to perform a contract, to pursue our legitimate interests in operating and improving the business, to comply with legal obligations, or on the basis of your consent where consent is required.
7. Third-party services
We currently use or rely on WhatsApp, Google Maps, and Gmail or a similar email provider for communication. If you use Google Maps or another embedded third-party service, that provider may process data under its own terms and privacy policy. Card payments, where available, are handled by the relevant payment processor used on the boat, and we do not store full card details ourselves.
9. Retention
We retain personal data only for as long as necessary to fulfil the purposes described in this policy, unless a longer retention period is required by law. Booking, invoicing, accounting, and tax records may need to be kept for the periods required under Croatian law. When data is no longer needed, we will delete it or anonymize it where appropriate.
11. Security
We use reasonable technical and organizational measures to protect personal data against unauthorized access, accidental loss, misuse, or disclosure. No internet-based service can be guaranteed completely secure, but we work to keep the level of protection proportionate to the data we handle.
12. Your rights
Subject to applicable law, you may have the right to access your data, request rectification, request deletion, restrict processing, object to processing, receive portability of your data, and withdraw consent where processing is based on consent. To exercise your rights, contact us using the details above.
13. Children
Our service is intended for adults and families. We do not knowingly collect personal data from children without the involvement of a parent or guardian. If you believe a child has provided personal data to us without proper authorization, please contact us so we can review and address the matter.
14. Complaints and supervisory authority
If you believe your data has been handled unlawfully, please contact us first so we can try to resolve the issue. You also have the right to lodge a complaint with the Croatian data protection authority, the Croatian Personal Data Protection Agency (AZOP), where applicable.
15. Changes to this policy
We may update this Privacy Policy from time to time to reflect changes in our services, legal obligations, or third-party tools. The updated version will be posted on the website with a revised effective date when appropriate.
16. Contact
For questions about this Privacy Policy or our handling of personal data, please contact us at boat.medulin@gmail.com, by phone at +385 91 621 1109 or +385 91 955 3199, by WhatsApp at +385 91 621 1109, or by mail at Ulica Videlanka 26, 52100 Pula, Croatia.
17. Governing law and jurisdiction
This Privacy Policy is governed by Croatian law. Any dispute arising from this policy shall, where permitted by law, be subject to the competent courts in Pula, Croatia.